add CORS headers filter